Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.
Airscanner warns of Pocket Internet Explorer security flaws
Posted on 27-Jan-2005 10:45. | Tags Filed under: News.



Security firm Airscanner released information about several weaknesses in Pocket Internet Explorer, the standard web browser that comes pre-installed on Windows Mobile Pocket PC and Smartphone devices.

These flaws can be used together to trick end users into submitting local and/or sensitive data, such as usernames and passwords. The potential for exploiting these vulnerabilities are restricted only by an attacker’s imagination. The research firm says that Pocket Internet Explorer is not as powerful as its big brother Internet Explorer, and as such, an attacker is limited in what techniques can be used to launch an attack.

For example, Pocket Internet Explorer has no support for the iframe tag, which is extremely useful in XSS and browser-based attacks. In addition, Pocket Internet Explorer does not support every JavaScript command commonly used by attackers. The company has released detailed information about these flaws and give an example that combines these individual flaws into one attack, as a proof of concept. The example will only work on a Windows Mobile Pocket PC.

The flaws involve Unicode URL obfuscation, access to local files, and <div> XSS tag. The most important is the first one, since this can mislead users to believe they are accessing a website when in fact the browser is being redirected to the attacker's domain. Local file access is not quite a flaw, since all browsers can read local files, but when combined with the Unicode URL obfuscation and the <div> XSS tag a script can be written that potentially can collect personal information.


More information: http://www.airscanner.com/tests/ie_flaw/ie_at...

comments powered by Disqus




Trending now »

Hot discussions in our forums right now:

Good riddance to Obama and his drones. Pakistani villagers will be saying the same.
Created by amiga500, last reply by Geektastic on 21-Jan-2017 22:45 (87 replies)
Pages... 4 5 6


The President Of The USA: Donald Trump
Created by TimA, last reply by Fred99 on 21-Jan-2017 22:58 (1830 replies)
Pages... 120 121 122


Xtra email no longer receives on Outlook 2003 / Outlook 2011 for MAC
Created by lNomNoml, last reply by hio77 on 21-Jan-2017 22:59 (41 replies)
Pages... 2 3


$1160 for a car battery??!!
Created by jonathan18, last reply by k1w1k1d on 21-Jan-2017 17:11 (56 replies)
Pages... 2 3 4


Lost Mp3 collection, how to rebuild on the cheap (legally)?
Created by TeaLeaf, last reply by kickintheeye on 18-Jan-2017 23:05 (18 replies)
Pages... 2


New Ford Mustang or Holden Commodore or alternatives
Created by MikeB4, last reply by driller2000 on 21-Jan-2017 12:39 (63 replies)
Pages... 3 4 5


Upsize my American houses to McMansion value deal.
Created by kingdragonfly, last reply by richms on 18-Jan-2017 15:48 (14 replies)

Spec check on laptop for GoPro editing please
Created by martyyn, last reply by richms on 20-Jan-2017 17:23 (13 replies)